Forum Discussion
Seckin_149390
Nimbostratus
NimbostratusHow to Exclude Domains or IP Addresses from proxy.pac file
Hi Everyone,
We are using forcepoint proxy devices behind F5 and sending proxy.pac file from F5 VIP if HTTP URI is equal /proxy.pac. (There is no problem with it. It works when the connection hits to VIP and download proxy.pac file)
My question is that Can i write an irule for this proxy.pac file in order to exclude some domains or ip addresses. For example; if HTTP host is equal or , do not use proxy devices and go to internet directly. (direct to firewall)
if not, get the pac file and forward to traffic forcepoint devices.
Regards... Seckin
- Kai_Wilke
MVP
Hi Seckin,
you could either host an already changed copy of your
file within an iRule, so that HTTP requests to/proxy.pac
will become intercepted and HTTP responded by this iRule./proxy.pacIf you need to retain certain dynamics of your existing
file (e.g. the file gets dynamically generated based on the current Forcepoint Proxy configuration), then you could use LTMs/proxy.pac
commands to modify the script as needed (e.g. add some lines right after[STREAM::*]
before delivering thefunction FindProxyForURL(x, y) {
response to your clients./proxy.pacTo help you further you will need to post your current
file (or at least an anonymized version of it) and explain if you are fine to host the pac file on your LTM or if you need to modify certain parts on-the-fly./proxy.pacCheers, Kai
